Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
File:                     uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json)
Hash identifier:          fXJ3r5ChFvJU0bOL0SrhiPnII98i/PjXBYij+5xMqG0=
Subject key identifier:   FB:00:E4:A5:02:12:CC:FF:91:A6:1D:DA:79:9F:E4:F5:9F:D5:E3:4D
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Certificate issuer:       /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial:       019D2996F856ECF9B96B9E197DAFE9C45D11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
Manifest number:          034F
Signing time:             Thu 26 Mar 2026 10:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:52 +0000
Files and hashes:         1: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: BjS33XTeD88+a6vprZ5oieTTwpyDTEaqnxh7+bPFtuI=)
                          2: zl-n2q1Zb7EgYohA26XnxYXqdxE.roa (hash: BY/YVHNSQVEAmKd+rhuDTBW07jn5TB4TSJNB9lFmcSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:f8:56:ec:f9:b9:6b:9e:19:7d:af:e9:c4:5d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
        Validity
            Not Before: Mar 26 10:00:52 2026 GMT
            Not After : Mar 27 10:00:52 2026 GMT
        Subject: CN=fb00e4a50212ccff91a61dda799fe4f59fd5e34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:57:e0:33:7a:90:f3:aa:6c:1b:9e:ae:24:
                    2f:fa:14:73:e3:64:83:40:d5:c0:0a:1f:6c:d6:7c:
                    3a:83:c5:f0:ab:e9:b7:ac:15:80:d3:86:d1:1a:23:
                    f2:4a:2a:03:bb:17:0c:c1:ac:c8:00:86:4b:c0:b3:
                    8a:84:aa:1b:72:50:b5:33:cf:96:87:20:24:0b:5c:
                    29:e7:b0:8a:77:6b:e1:77:b0:44:dc:28:b5:c3:6c:
                    78:31:8c:6a:fe:da:f2:9a:46:ee:ad:fb:b1:15:9c:
                    57:c8:df:a5:e9:29:bc:1b:73:8f:51:e3:b4:fb:98:
                    38:c0:ab:c5:b3:7c:78:2d:2e:b3:d7:95:af:30:9f:
                    41:93:9d:5e:cc:58:b0:fe:c3:57:28:97:0c:cc:66:
                    a3:49:d2:ce:ec:ad:4f:c6:c9:d0:b6:45:08:ed:75:
                    09:2e:2c:15:de:44:d5:b8:74:f7:0f:3e:b5:c0:da:
                    3d:e8:d6:bb:5b:cf:7f:12:c3:02:71:cc:a1:8f:94:
                    c0:8b:6c:b7:f4:e8:88:d3:0c:ed:c2:5f:64:52:e6:
                    1b:e1:5d:c5:09:76:02:6e:45:b0:1e:e8:e3:2f:53:
                    bd:87:a4:91:c2:5c:1d:25:50:7a:dc:7e:09:9f:02:
                    c2:46:06:76:2c:e9:f5:5f:a4:4a:1f:d6:23:a7:20:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:00:E4:A5:02:12:CC:FF:91:A6:1D:DA:79:9F:E4:F5:9F:D5:E3:4D
            X509v3 Authority Key Identifier:
                keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:62:bd:50:c7:cf:d5:c0:9f:9a:e2:bd:a9:c8:a6:ee:07:96:
         93:f0:b4:3d:59:7f:0e:3d:36:76:79:4f:e6:e8:d1:cf:41:0d:
         ce:b0:09:51:fb:43:1b:0f:45:ab:d0:41:70:0c:6d:53:30:d7:
         e5:81:64:24:56:03:21:ec:31:58:18:a3:60:12:4e:e2:f5:56:
         4b:7b:ea:03:e4:2d:8e:18:3a:0e:65:6c:c2:be:94:5a:4c:2a:
         2c:05:ed:d6:90:f2:55:b1:55:33:73:77:64:18:31:bf:1f:4a:
         da:50:36:9b:94:9b:4e:8d:84:a4:2a:9c:c2:86:aa:56:1f:c4:
         a0:28:b8:01:63:36:08:aa:9a:ab:d0:a8:86:96:02:d6:c4:a4:
         cd:ff:a2:a8:79:31:d0:6b:53:0b:8f:54:ed:af:6a:52:9b:be:
         98:b2:00:38:cd:a5:89:2c:86:c5:b0:cd:9d:21:55:e6:02:b0:
         5a:29:20:3b:89:f7:7c:8c:48:cf:bb:bf:e9:f7:72:b5:5a:7b:
         da:5a:69:7d:74:bf:fc:bd:35:c9:80:9e:5b:91:63:f6:a0:bf:
         4a:19:b8:b5:77:ec:aa:d2:c4:28:99:f9:05:5b:c5:eb:dc:ff:
         97:44:7b:6e:7c:2f:34:e1:3e:a8:f9:e9:bc:98:99:a4:65:03:
         ac:b0:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:47 2026 by rpki-client